Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/34352e3233352e3136322e302f32332d3233203d3e20323637343230.roa
File:                     34352e3233352e3136322e302f32332d3233203d3e20323637343230.roa (raw, json)
Hash identifier:          souGXHWLnYJCI7Pe3wVGdQQzAP/RWfxtJt4O83v6q7E=
Subject key identifier:   E2:F9:CE:45:F6:20:FC:2E:81:93:53:C5:86:CE:75:C0:28:18:46:FB
Certificate issuer:       /CN=F7646425053708CC938EC4540ECBBF44B2849544
Certificate serial:       1EC53708CB19291F212035AF8D855F07C284ED31
Authority key identifier: F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/34352e3233352e3136322e302f32332d3233203d3e20323637343230.roa
Signing time:             Fri 05 Apr 2024 02:00:36 +0000
ROA not before:           Fri 05 Apr 2024 01:55:36 +0000
ROA not after:            Fri 04 Apr 2025 02:00:36 +0000
asID:                     267420
IP address blocks:        45.235.162.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 21:02:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:c5:37:08:cb:19:29:1f:21:20:35:af:8d:85:5f:07:c2:84:ed:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7646425053708CC938EC4540ECBBF44B2849544
        Validity
            Not Before: Apr  5 01:55:36 2024 GMT
            Not After : Apr  4 02:00:36 2025 GMT
        Subject: CN=E2F9CE45F620FC2E819353C586CE75C0281846FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:94:9d:32:f5:fe:d6:43:8a:e6:ff:b8:57:1e:
                    76:4c:3f:c0:86:40:f7:2b:68:7c:d9:c1:5b:1b:c5:
                    ec:a0:96:75:dc:c6:c5:cb:24:24:fb:38:e0:14:37:
                    7e:ad:98:f8:7a:04:c6:91:1b:8e:80:a6:b5:e0:8f:
                    da:71:c2:7a:f1:ac:64:ab:e3:f3:97:42:9d:9f:5c:
                    94:d8:3b:55:a0:fe:b7:2b:59:19:fb:44:e9:2c:cb:
                    78:9e:4c:d4:96:fb:52:c9:f8:7f:58:e5:c2:12:e6:
                    46:8c:9d:69:43:bd:93:61:56:04:15:c6:28:7b:81:
                    f7:bc:33:90:81:5e:54:ba:0f:d1:51:5a:34:56:bd:
                    64:42:f6:7c:09:43:08:d7:28:74:34:df:78:af:64:
                    29:b8:9a:5d:cc:2e:df:bf:95:d7:2d:90:2b:bb:e6:
                    2e:9a:e0:bc:78:4d:f0:75:49:a8:9d:ea:e7:78:63:
                    82:fd:bb:c9:06:31:f8:41:7a:2e:99:d1:42:16:a7:
                    7a:dd:82:8c:42:68:da:88:e5:62:72:d1:fb:f6:53:
                    c7:1d:7f:be:e3:a0:7f:20:4f:3f:3b:ef:e9:c5:50:
                    98:ac:99:d5:5f:b2:cc:86:fa:06:d7:03:62:c2:9e:
                    da:de:c3:05:ae:a1:3d:a1:e8:45:c1:48:37:e1:41:
                    26:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F9:CE:45:F6:20:FC:2E:81:93:53:C5:86:CE:75:C0:28:18:46:FB
            X509v3 Authority Key Identifier:
                keyid:F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/F7646425053708CC938EC4540ECBBF44B2849544.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/34352e3233352e3136322e302f32332d3233203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:75:d0:2f:fa:34:53:be:3f:4b:da:83:bc:0f:55:97:18:6b:
         c0:17:77:bf:f2:b2:db:a9:ea:2c:4b:ae:d3:cc:0b:0f:8b:b7:
         f3:f8:96:2f:17:ef:5c:bc:a4:49:11:f0:be:43:5b:00:71:32:
         05:5a:4a:67:66:fd:da:21:62:04:4a:87:5b:87:db:66:13:75:
         de:b6:04:79:e8:33:c3:e4:9b:84:6a:f4:46:a8:45:8f:e6:72:
         67:cf:94:30:8a:ed:ab:67:69:e5:0d:c9:53:f5:ce:2e:7a:90:
         00:0b:0d:55:4e:ee:e2:34:99:9c:3f:ba:28:ce:ef:92:71:c0:
         cb:3e:30:f9:1e:27:8a:20:30:e9:a1:10:ad:a0:cd:08:09:91:
         34:5d:c9:9e:78:3d:bf:cd:f7:64:ac:b6:67:cc:47:cf:0d:67:
         de:5f:a0:3f:cd:bc:32:b3:81:5c:e5:ff:ae:b9:81:f7:1e:8b:
         f3:6c:30:f5:1f:06:6a:4a:ea:8c:bb:d7:cb:aa:26:6b:ec:dd:
         5c:2c:c3:6f:b8:48:cf:51:3b:2a:47:b1:b2:44:a1:b5:42:63:
         25:0f:63:54:66:dc:30:95:23:0b:64:c1:ec:78:6b:70:aa:6e:
         57:fe:83:7d:b7:d4:a2:f2:9f:97:82:77:55:9a:21:51:85:03:
         b6:d1:51:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org